wonce netdom join has run, if you look in usermangler, you can see the SID of Dadmin, but it hasn't been resolved... at least until it reboots.
I may try to put it in a runonce, but hopefully runas might do it... unless I can make it more complex with NTDS 
